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HVAC  Server  Hacked!  -  05 -24 -2D  09,  06:06  AM 

Spreading  botnets  is  soring,  But  sometimes  you  get  a  hefty  prize  For  ail  your  hard  work  and  labor  Like  this 
you  see  below.  An  HVAC  server.  An  HVAC  Is:  HVAC  (pronounced  either  "H-V-A-C"  or  *H-vak")  Ls  an  Inltlallsm 
or  acronym  that  stands  for  "heating,  ventilating,  and  air  conditioning".  HVAC  is  sometimes  referred  to  as 
c-fmate  control  and  is  particularly  Important  In  the  design  of  medium  to  large  industrial  and  office  buildings 
such  as  skyscrapers  and  in  marine  environments  yay  for  wiki 
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Objective:  To  invest  my  talents  and  skills  in  an  area  that  others  may  benefit  from  them 


April  ,2007  -  April  2008  Allied  Baron  Security  Services  Fort  worth,  rFX 


Security  Officer 


Responsibilities  include  the  following:  data  entry,  telephone  etiquette,  customer  service,  making  copies 
handling  difficult  situations,  communicating  with  EMS  and  police. 


April  2008  -  May  2008  Triple  D  Armored  Services  Dallas,  TX 


Armored  Car  Driver 


Daily  interaction  with  customers,  delivery,  telephone  etiquette,  navigation,  loading  and  unloading,  auditing 
coin  and  cash. 


October  2008  -  present  United  Protective  Services  Dallas,  TX 


Customer  service,  telephone  etiquette,  monitoring  and  securing  infrastructure,  making  copies,  logging 
events. 


®  Called  FBI  and  Texas  DA’s  office  on 
Monday 

®  FBI  agent  from  Jackson  drove  up  that 
afternoon  to  get  the  evidence 

®  Briefed  agents  on  findings  and  notified 
them  of  new  developments  over  the 
next  few  days 

®  Arrested  as  he  arrived  to  work  that 
Friday  evening 


4.  There  is  probable  cause  to  believe  that  JESSE  WILLIAM  MCCRAW  has 

violated  the  provisions  of  1 8  U.S.C  §1 030(a)(5)(A)  and  §1030(c)(4)(B)(iv). 

1030(a)(5)(A)  Whoever  . . .  knowingly  causes  the  transmission  of  a  program, 
information,  code,  or  command,  and  as  a  result  of  such  conduct,  intentionally 
causes  damage  without  authorization,  to  a  protected  computer.. 

1030(e)(4)(B)(i)  the  punishment  for  an  offense  under  subsection  (a)  ...  of  this 
section  is  -  a  fine  under  this  title,  imprisonment  for  not  more  than  10  years,  or 
both,  in  the  case  of  -  an  offense  under  subsection  (a)(5)(A)  vvhich  does  not  occur 
after  a  conviction  for  another  ofTense  under  this  section,  if  the  offense  cause  ...  a 
harm  provided  in  subclauses  (I)  through  (VI)  of  subparagraph  (A)(iv),  [that  being 
(iv)|.  a  threat  to  public  health  or  safety; 

15.  On  6/24/2009.  SAs  Lynd  and  Singh  spoke  to  the  apartment  manager  at  2801 
I R1NITY  OAKS  DR,  ARLINGTON,  TX,  76001,  who  confirmed  that  JESSE 
WILLIAM  MCGRAW  lives  in  apartment  328  based  on  his  lease  and  that  he  and  his 
wife  had  two  vehicles  on  the  lease,  including  a  Nissan  Allium,  The  apartment  manager 
also  provided  a  floor  plan  of  apartment  328  and  a  verbal  description  of  the  apartment. 

]  he  apartment  manager  also  stated  there  was  a  camera  over  the  door  of  apartment  328.  Ill 
is  Affiant's  experience  that  computer  hackers  who  believe  that  they  are  under  surveillance! 
I  or  in  danger  of  being  arrested  use  cameras  to  see  who  is  at  their  doors  in  order  to  destroy 
evidence  and  /  or  llee  il  law  enforcement  or  a  rival  hacker  come  to  their  residence.  The 
|  manager  stated  that  apartment  328  was  in  the  first  set  of  apartments  on  the  right  facing 
I  rinity  Oaks  Drive  and  across  the  first  breezeway  and  up  one  flight  of  stairs  on  the  left 
side  of  the  landing. 


19.  SA  Singh  was  also  told  lhal  a  review  of  the  UVAC  computers  had  identified  a 
malicious  program  tin  it  which  allowed  unauthorized  users  to  assume  remote  control  of 
the  system.  Property  management  also  noted  that  the  UVAC  system  was  continuing  to 
experience  problems,  including  a  one  hour  outage  of  all  five  units  controlled  by  the 
UVAC  computer  on  6/25/2009,  which  appeared  to  originate  with  the  software 
controlling  the  HVAC  system  as  none  of  the  alarms  which  should  have  gone  off  did. 
They  further  noted  that  prior  to  the  intrusion  they  have  never  experienced  an  incident 

d 

where  more  than  one  or  two  units  had  problems  at  the  same  time. 


[Other  Acts: 

P  SA$  Lynd  and  Singh  also  reviewed  the  documents  provided  by  LT  Hilboll  which 
[CW-t  had  collected.  Included  in  these  documents  was  what  appeared  to  be  a  compromise 
I  of  the  City  of  Dallas  computer  system  by  ETA.  MCGRAW's  hacker  group,  Based  on  the 
Inaming  of  this  system  in  appeared  to  be  a  computer  used  by  Dallas  Police  Department's 
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Case  3:09-mj-00207-BD  Document  1  Filed  06/26/2009  Page  1 8  of  19 
I  (DPD)  aviation  unit.  Detective  Bill  Cox,  a  DPD  officer  working  with  the  FBI  in  a  task 
force  role,  confirmed  that  the  computer  was  an  aviation  unit  computer  located  at  or  near 
Love  Field  and  that  it  was  already  known  by  DPD  to  have  been  compromised  by  an 
unauthorized  individual.  Other  documents  indicated  that  MCGRAW  had  also 
I  compromised  computers  used  by  the  National  Aeronautic  and  Space  Administration 
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I8U.S.C,  §  1030(aX5XA)and§  1030(cX4XB)(i)(II) 

Transmitting  a  Malicious  Code 

18  U.S.C  1030(a)(5)(A)  and  §  1030(c)(4)(B)(i)(II)  and  (IV) 

Transmitting  a  Malicious  Code 
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Filed  in  open  court  this  day  of _ A,D.  2009. 
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